Vulnerabilities > Podofo Project > Podofo > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-03-11 CVE-2019-9687 Out-of-bounds Write vulnerability in multiple products
PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
network
low complexity
podofo-project fedoraproject CWE-787
critical
9.8
2017-05-01 CVE-2017-8378 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Podofo Project Podofo 0.9.5
Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size.
network
low complexity
podofo-project CWE-119
critical
9.8
2017-03-16 CVE-2015-8981 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Podofo Project Podofo
Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size.
network
low complexity
podofo-project CWE-119
critical
9.8